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What is Claimed is: 

1 . A distributed network monitoring system comprising: 
one or more hierarchical monitoring systems; and 

one or more alarm signals that represent an unauthorized access attempt into 
one or more portions of the distributed network, wherein the one or more hierarchical 
monitoring systems at least one of analyze the unauthorized access attempt, determine a 
responsive action to the unauthorized access attempt, or forward information regarding the 
unauthorized access attempt to one or more of the one or more hierarchical monitoring 
systems. 

2. The system of claim 1 , further comprising a monitoring device that monitors 
information on one or more distributed networks. 

3. The system of claim 1 , further comprising an intrusion analysis system that 
receives the one or more alarm signals and at least one of determines the origin of the 
unauthorized access attempt, logs communications and evaluates the threat of the 
unauthorized access attempt. 

4. The system of claim 1, further comprising an intrusion interaction system 
that is capable of communicating with the origin of the unauthorized access attempt. 

5. The system of claim 1, further comprising an escalation determination 
system that, based on an evaluation the unauthorized access attempt and a comparison to 
one or more other unauthorized access attempts, forwards information regarding the 
unauthorized access attempt to the one or more of the one or more hierarchical monitoring 
systems. 

6. The system of claim 1, wherein the one or more alarm signals is generated by 
one or more recipients of the unauthorized access attempt. 
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7. The system of claim 1, further comprising a response system that 
communicates information to one or more of a monitored site and a law enforcement 
agency. 

8. A method of protecting a distributed network comprising: 

monitoring one or more portions of the distributed network through one or 
more hierarchical monitoring systems; and 

receiving one or more alarm signals that represent an unauthorized access 
attempt into one or more portions of the distributed network, wherein the one or more 
hierarchical monitoring systems at least one of analyze the unauthorized access attempt, 
determine a responsive action to the unauthorized access attempt, or forward information 
regarding the unauthorized access attempt to one or more of the one or more hierarchical 
monitoring systems. 

9. The method of claim 8, further comprising monitoring information on one or 
more geographic or organizational portions of the distributed network. 

10. The method of claim 8, further comprising receiving the one or more alarm 
signals and at least one of determining the origin of the unauthorized access attempt, 
logging communications and evaluating the threat of the unauthorized access attempt. 

1 1 . The method of claim 1 0, wherein the logging can be restricted based on an 
analysis of the unauthorized access attempt. 

12. The method of claim 8, further comprising communicating with the origin of 
the unauthorized access attempt. 

13. The method of claim 8, further comprising forwarding, based on an 
evaluation of the unauthorized access attempt and a comparison to one or more other 
unauthorized access attempts, information regarding the unauthorized access attempt to the 
one or more of the one or more hierarchical monitoring systems. 
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14. The method of claim 8, wherein the one or more alarm signals is generated 
by one or more recipients of the unauthorized access attempt. 

15. The method of claim 8, further comprising communicating information to 
one or more of a monitored site and a law enforcement agency. 
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